dnssec-sign
changeset 9 c45415af9a4b
parent 8 a1eefce2bd5e
child 12 5786a8b53c78
equal deleted inserted replaced
8:a1eefce2bd5e 9:c45415af9a4b
     1 #!/bin/bash
     1 #!/bin/bash
     2 source ./dnstools.conf
     2 source ./dnstools.conf
     3 master_dir=$MASTER_DIR
     3 master_dir=$MASTER_DIR
       
     4 
       
     5 #prüft die eingegebnen domains
       
     6 for utf8domain in $@
       
     7 do
       
     8 	domain=$(idn --quiet "$utf8domain")	
       
     9 
       
    10 	if [ -d $master_dir/$domain ]
       
    11 	then
       
    12 		zone_aenderung="$zone_aenderung $master_dir/$domain"
       
    13 	else
       
    14 		echo $domain ist keine verwaltete Zone
       
    15 	fi
       
    16 done
     4 
    17 
     5 function time_out {			#prüft den ablauf der signatur
    18 function time_out {			#prüft den ablauf der signatur
     6 	unowtime=`date +%s`
    19 	unowtime=`date +%s`
     7 	alerttime=`date -d @$[unowtime - $[ 3600 * $SIGN_ALERT_TIME  ] ] +%Y%m%d%H`
    20 	alerttime=`date -d @$[unowtime - $[ 3600 * $SIGN_ALERT_TIME  ] ] +%Y%m%d%H`
     8 
    21 
    25 }
    38 }
    26 
    39 
    27 function new_sign {		# prüft nach der ersten signatur
    40 function new_sign {		# prüft nach der ersten signatur
    28 	for zone in $master_dir/*
    41 	for zone in $master_dir/*
    29 	do
    42 	do
    30 		if [ `< $zone/keycounter` -le 0 ]
    43 		if [ -f $zone/keycounter ]
    31 		then
    44 		then
    32 			echo $zone
    45 			if [ `< $zone/keycounter` -le 0 ]
       
    46 			then
       
    47 				echo $zone
       
    48 			fi
    33 		fi
    49 		fi
    34 	done
    50 	done
    35 }
    51 }
    36 
    52 
    37 function aenderung {		# manuelle eingabe
       
    38 	for domain in $@
       
    39 	do
       
    40 		test -d $master_dir/$domain && echo $master_dir/$domain
       
    41 	done
       
    42 }
       
    43 
       
    44 zone_aenderung=`aenderung $@`
       
    45 zone_new_sign=`new_sign`
    53 zone_new_sign=`new_sign`
    46 zone_time_out=`time_out`
    54 zone_time_out=`time_out`
    47 
    55 
    48 for zone in $zone_aenderung $zone_new_sign $zone_time_out
    56 for zone in $zone_aenderung $zone_new_sign $zone_time_out
    49 do
    57 do
    50 	cd $zone
    58 	cd $zone
    51 	domain=${zone##/*/}
    59 	domain=${zone##/*/}	
    52 	dnssec-signzone $domain
    60 	key_counter=`< keycounter`
    53 
    61 
    54 	key_counter=`< keycounter`
    62 	dnssec-signzone $domain && echo $[ key_counter + 1 ] > keycounter
    55 	echo $[ key_counter + 1 ] > keycounter
       
    56 done
    63 done